Visual Spoofing via RTL Override, Punycode, and Homoglyph Injection - ATR-2026-00086 (6c328093-8430-5240-abdf-a695b4cca120)
Detects injection attempts that use visual spoofing techniques including Right-to-Left (RTL) override characters, Punycode-encoded domains, and CJK or Cyrillic homoglyph substitution to disguise malicious payloads as benign text or trusted domain references.